Protect yourself from tech support scams

Tech support scams are an industry-wide issue where scammers use scare tactics to trick you into paying for unnecessary technical support services that supposedly fix contrived device, platform, or software problems.

How tech support scams work

Scammers may call you directly on your phone and pretend to be representatives of a software company. They might even spoof the caller ID so that it displays a legitimate support phone number from a trusted company. They can then ask you to install applications that give them remote access to your device. Using remote access, these experienced scammers can misrepresent normal system output as signs of problems.

Scammers might also initiate contact by displaying fake error messages on websites you visit, displaying support numbers and enticing you to call. They can also put your browser on full screen and display pop-up messages that won't go away, essentially locking your browser. These fake error messages aim to trick you into calling an indicated technical support hotline.

Important

Microsoft error and warning messages never include phone numbers.

When you engage with the scammers, they can offer fake solutions for your “problems” and ask for payment in the form of a one-time fee or subscription to a purported support service.

Performing serious recovery methods like resetting your device can be a bit time-consuming, but this may be your best option in some situations—for example, if fake error codes and messages pop up continually, all but preventing you from using your device.

Run a full scan with Windows Security to remove any malware. Learn how

Apply all security updates as soon as they are available. To see available updates, select the Start button, then select Settings > Update & Security > Windows Update. For more info, see Update Windows 10.

Reporting tech support scams

To report an unsafe website directly to Microsoft, fill out a Report an unsafe site form. You can also report unsafe websites in Microsoft Edge by selecting Settings and More > Help and Feedback> Send feedback when you encounter something suspicious.

How to protect against tech support scams

Microsoft does not send unsolicited email messages or make unsolicited phone calls to request personal or financial information, or to provide technical support to fix your computer.

Any communication with Microsoft has to be initiated by you.

If a notification appears with a phone number, don’t call the number. Error and warning messages from Microsoft never include a phone number.

Download software only from official Microsoft partner websites or the Microsoft Store. Be wary of downloading software from third-party sites, as some of them might have been modified without the author’s knowledge to bundle support scam malware and other threats.

Use Microsoft Edge when browsing the internet. It blocks known support scam sites using Windows Defender SmartScreen (which is also used by Internet Explorer). Furthermore, Microsoft Edge can stop pop-up dialog loops used by these sites.

Popular scam types

In this type of scam, scammers call you and claim to be from the tech support team of Microsoft or other vendors. They then offer to help solve your computer problems.

Scammers often use publicly available phone directories, so they might know your name and other personal information when they call you. They might even guess what operating system you're using.

Once they've gained your trust, they might ask for your user name and password or direct you to a legitimate website to install software that will let them access your computer to fix it. If you install the software and provide credentials, your computer and your personal information are vulnerable.

Although law enforcement can trace phone numbers, perpetrators often use pay phones, disposable mobile phones, or stolen mobile phone numbers. Treat all unsolicited phone calls with skepticism. Do not provide any personal information.

Warning

If you receive an unsolicited call from someone claiming to be from Microsoft Support, hang up. We do not make these kinds of calls.

Tech support scam websites make you believe that you have a problem with your PC. You may be redirected to these websites automatically by malicious ads found in dubious sites, such as download locations for fake installers and pirated media.

These websites can use any of the following tactics to convince you that there's a problem with your PC that needs fixing:

A fake blue-screen error

A fake Windows activation dialog box

Various fake system errors

Supposed malware infection or malicious activity

They can also use the following techniques to make their claim more believable:

Put the image or your browser on full screen, making the error appear as though it’s coming from Windows instead of the webpage

Disable Task Manager

Continuously display pop-up windows

Play audio messages

All these techniques are meant to persuade you to call the specified tech support number. In contrast, the real error messages in Windows 10 never ask you to call a tech support number.

Some tech support scams may also come in the form of malware. When run, this malware may display fake error notifications about your computer or software, similar to tech support scam websites. However, because they are programs that are installed on your computer, scammers will likely use them to perform other malicious actions, such as to steal data or install other malware.

Scammers may also use other ways to reach you, such as email or chat. These email or chat messages may resemble phishing emails; however, instead of pointing to phishing sites designed to steal credentials, the links lead to tech support scam websites.

www.computerdata.com normally users encryption to protect your information. When Chromium tried to connnect this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be www.computerdata.com, or a Wi-Fi sign-in screen has interrupted the connection before any data was exchanged, Hackers attacked from overseas countries.

YOUR COMPUTER HAS BEEN LOCKED!

Your computer has been locked due to violation of the cybersecurity Act of 2016 (SCA 2016, A. 2077) of the United States of America. The computer lock is aimed to stop your illegal activity.

Enter Your Activation Key Here. Unlock. CS Cyber Security

Your device is under threat.

Turn on Real-time protection?

The server runnewdirectory.info is asking for your user name and password. The server reports that it is from Suspicious activity detected on your IP address due to harmful virus installed in your computer. Your data is at a serious risk. There is a system file missue due to some harmfull virus Debug malware error, system failure.

Microsoft WARNING!

The adult website you have visited in the last 24 hours is infected with Trojan Cerber2.downloader. It is a self-replicating virus which can block your personal files.

If you have not authorized this log in, your Facebook account may have been compromised due to a malicious virus. We strongly suggest you call our Certified Windows Technicians Toll-free

Application.exe has stopped working

Windows can check online for a solution to the problem.

View problem details. Call Toll Free Number.

AMY (Microsoft Technician)

I'm Amy from Microsoft. Don't panic, we know you are not at fault. Please call us now to get this removed. Reference Code 21938

Action Required Threats Detected

Asware.DomaIQ has been detected. Ws.Toria.G has been detected. Ws.Security.3 has been deleted.

System is critically infected! Contact support immediately.

Microsoft Security Alert!

Firewall detecting 'suspicious' incoming network connections, we recomment that you click on "Back to Safety"

Windows 10 Pro Update. Failed Error 10xE0008c

Windows 10 Setup. What needs your attention.

This device isn't compatible in Windows 10. Contact the manufacturer for more info.

WARNING! The Website you may have recently visited have downloaded the Malware and Virus on your Windows system.

Contract Microsoft Windows Help Desk For Immediate Support and resolve this issue at Toll Free Number.

Click on Report to Microsoft to let us know about this issue.

Your System is under risk

Helpline Number (Toll free)

Microsoft Security Essentials

support.apple.com says: ** Apple Warning Alert **

Malicious Pornographic Spyware/Riskware Detected

Error # 0x800

Malware Alert! Your device access is disabled to prevent damages.

Windows Security Essentials have Detected Security Issue With This PC. Hacking attempts using VPN servers hiding entities by using this Machine Access.

Firewall Security Alert!

Please Call Support for Windows 10

Microsoft Case ID

174.138.39.110 Chrome Windows 10 POSSIBLE ERRORS

Microsoft Corporate HAS BLOCKED YOUR PC.**

Error # 268D3

Please call Microsoft immediately

WARNING! Mac OS X is infected with Viruses and other malicious applications.

Viruses must be removed and system damage repaired. It is necessary to run the Virus removal procedure immediately, please proceed.

**If you leave this site your Mac OS X will remain damaged and vulnerable** Call apple support

Firewall deteting 'suspicious' incoming network connections, we recomment that you click on "Back to Safety"

Your computer has been Locked

Your computer with the IP address 182.74.27.50 has been infected by the Trojans -- Because System Activation KEY has expired and Your information have been stolen. Call the Google Help Desk to protect your files and identity.

PLEASE NOTE: Multiple settings on your browser and Computer may not be properly Configured which may result in poor internet browsering performance, excessive advertisements, and a slow Computer, especially at startup. This could be because of outdated software creating security vulnerabilities.

Call technicall support new so we can HELP FIX YOUR COMPUTER. RECOMMENDED call immediately toll free support. Support agents are currently AVAILABLE.

Your System information: Popup ads ENABLED. Frequently Asked Questions Do you offer support for my computer: YES! Your computer and the operating system are supported. What should I do now? If popup ads are Enabled on your computer and you should call immediately. Enter your computer ID 4532.

Microsoft Edge Critical ERROR

There was a dangerous try to get an access to your personal logins and bank information. Luckily, your Firewall managed to block this suspicious connection. We recommend you to freeze your accounts until some measures will be taken.

Trojan Virus may have already hurt your hard disk and its data. Your urgent response is needed. Call Help Desk.

Windows Security Alert DRIVER IRQL NOT LESS OR EQUAL: BFEBFBFF0031246V

If this is first time you've seen this screen, contact windows technician. The problem seems to be caused by the following file: SPCMDCON.SYS

PAGE FAULT IN NONPAGED AREA

Unauthorized Access Detected!

Your computer has been infected by the PORN VIRUS RDN/YahLover.worm!055BCCAC9FEC Because System Has An Unauthorized Access

WARNING! Your Windows has been blocked due to suspicious activity!

Please call Microsoft Immediately. A Porn Virus has been detected by firewall.

Warning: Internet Security Breached!!

Illegal Porn activities have been found on your PC! Your PC has been Locked for IP protocol Violation and Cybersecurity violation. However, Your Accounts May have been Suspended Until You Take an Action. Your Personal Information seems to have Been Leaked. Call the INternet Security support Team immediately to Unlock your Computer.

CheckDisallowAllocation. Allocating memory when it not allowed to allocate memory T.E.C. Not Detected

FATAL ERROR: Out of memory for allocation, couldn’t free any thing else

This Build of Windows Platform is Expired Today

If it Expires, Your Windows Platform System will be locked or it will be restart in every few minutes

Windows Defender Alert: Zeus Virus Detected in Your Computer !!

Internet Security Alert! Code: 055BCCAC9FEC

Please Do Not Shut Down or Reset Your Computer. The following data will be compromised if you continue: 1. Passwords, 2. Browser History, 3. Credit Card Information, 4. Local Hard Disk Files. Call Microsoft Technical Department

Windows Security Essentials have Detected Security Issue With This PC

Windows Activation Issue Has Been Detected On this Computer Please Call Support

Windows Firewall Has Detected Security Breach from this IP Address. This IP Has Been used for illegal Activity. Your Windows Will Stop Working in 24 Hours

Warning - Your IP address has been blocked from accessing this website for security reasons.

You may be a victim of online identity theft. The Spyware/Adware present on some device at your network location may have compromised your network security. An online ID theft can be intended to steal.

IMPORTANT ALERT. WARNING. Hard Drive Safety Delete Starting in 5:05 minutes. Attention customer: Your personal emails and other personal passwords as well as credit card information are at risk.

Your Computer Is heavily damaged by ( 4 ) virus!

We detect that you is 28.1% DAMAGED because of four harmful viruses from recent adult sites. Soon it will damage your system files and will corrupt your contacts, photos, data, applications, and expose personal data, etc.

If you do not remove the virus now, it will cause severe damage system files and expose personal data.

Your computer has been Locked.

Your computer with the IP address has been infected by the Virus. Because System Activation KEY has expired and Your information have been stolen.

Hard Drive is not accepted. The file or directory is corrupted and unreadable! Please call Support Now! To find the right solution.

WARNING! The website you may have recently visited have downloaded the Malware and Virus on your Windows 10 system. Contact Microsoft Windows 10 Help Desk for Immediate Support and resolve this issue.

1. Microsoft Windows 10 detected major Malware and Virus Download from the Internet. DO NOT TRY TO CLOSE THIS PAGE. 2. Your Personel Information like Login User Name, Password, and Banking Details are may not be SAFE. 3. Contact Microsoft Help Desk Immediately to prevent Data Theft on your Windows 10 system.

Windows Defender Alert: Zeus Virus Detected on your Computer!

Please do Not Shut down or reset your computer. This Virus is well known and mostly distributed through Adult/Porn sites. Pornography uploaded detected. Commonly used to steal personal and financial information from the infected device. Your device might also be used for performing DDOS attacks by cyber criminals and cause serious harm to other networks and websites. Please call Microsoft to rectify the issue and get your PC unlocked.

Important Alert – Your Computer At Risk

Zeus Virus Found

*** Microsoft Alert ***

System Blocked for Security Reasons. Call Microsoft Toll Free/ Please ensure you do not restart your computer it may lead to Permanent Damage to the System or Data loss. WARNING – Microsoft windows has detected that zeus virus has infected your system.

Action: Do Not Shut down or Reset Your Computer, Call Security Expert and Scan Your Device and Network Now

Your Windows has been blocked due to suspicious activity! Please call Support Now! Call Toll-Free to find the right solution.

Your PC ran into a problem and needs urgent attention. You need to contact support at toll free. Error code for this problem is 0x000019F. Please share this code with support expert so that you can get the instant solution for this problem.

A problem has been detected and System has been shut down to prevent damage to your computer. Check with your System Vendor for any BIOS updates. Disable BIOS memory options such as caching or shadowing.

Technical Information *** STOP: 0x00000ED (0x80F128D0, 0xc000009c)

Contact Certified System Technicians For Immediate Assistance

Windows Warning Alert

Malicious Spyware/Riskware Detected Error # 0x80072ee7

Please call us immediately. Do not ignore this critical alert. If you close this page, your computer access will be disabled to prevent further damage to our network. Your computer has alerted us that it has been infected with a Spyware and riskware.

Dear Microsoft Corporate Customer,

Your Windows 10 Support – Case ID Is 26310

POSSIBLE ERRORS! Call immediately. Case ID 26310.

Warning: Internet Security Damaged !!!

A Suspicious Connection Was Trying to Access your Logins, Banking Details and Tracking your Internet Activity. Your TCP Connection Was Blocked by Your Firewall. Your Accounts May be Suspended Until You Take an Action. Your Personal Information May Have Leaked. IMMEDIATE RESPONSE REQUIRED.

Your Hard Disk May Have Trojan Virus! Please Do Not Try to fix Manually, It May Crash Your Data. Consequently, we are performing additional security checks to verify system security. Please Visit Your Nearest Windows Service Center OR Call Help Desk

WARNING! The adult website you have visited in the last 24 hours is infected with Trojan Cerber2.downloader. It is a self-replicating virus which can block your personal files, Email, Facebook and Banking accounts.

Microsoft Windows OS Platform detected major Malware and Virus Download from the Internet. DO NOT TRY TO CLOSE THIS PAGE.

The removal of (2) Viruses is required immediately to prevent further system damage, loss of Apps, Photos or other files. Traces of (1) Phishing/Spyware were found on your computer. Personal and banking information at risk.

CRITICAL ALERT FROM MICROSOFT. YOUR COMPUTER HAS ALERTED US THAT IT IS INFECTED WITH VIRUS AND SPYWARE. THIS VIRUS IS SENDING YOUR CONFIDENTIAL INFORMATION, SAVED PASSWORDS, AND PERSONAL EMAILS TO HACKERS REMOTELY. PLEASE CALL US IMMEDIATELY SO THAT OUR SUPPORT ENGINEERS CAN WALK YOU THORUGH THE REMOVAL PROCESS OVER THE PHONE. IF YOU CLOSE THIS PAGE BEFORE CALLING US WE WILL BE VORCED TO DISABLE YOUR COMPUTER TO PREVENT FURTHER DAMAGE TO YOUR NETWORK. ERROR NUMBER #268D3

WARNING! Your Hard drive will be DELETED if you close this page. You have a ZEUS virus! Please call Support Now! Call Toll-Free to Stop This Process.

Windows Detected Potential Threat On Your Computer.

System Security Alert

Your information (for example, passwords, messages, and credit cards) are been extracted from your Device. Call Microsoft to protect your files and identity from misuse. Please do not try to close this page or your Device will be disabled to protect your data.

** YOUR COMPUTER HAS BEEN BLOCKED ** Your computer has alerted us that it has been infected with a virus and spyware.

Attention! System detected a potential hazard on your computer that may infect executable files. Your private information and pc is at risk.

Your PC ran into a problem We’re just collecting some error info.

Windows Defender Says Customer, your system has detected possible Suspicious Activity. Please call the toll-free number below for a Microsoft-Certified technician to help you resolve the issue.

For your safety, please do not open internet browser to avoid data corruption to the registry of your operating system. Please do not shut down or restart the computer. Doing that may lead to data loss and possible failure of the operation system, and potential non bootable situation resulting in complete data loss. Contact Microsoft certified technicians to resolve the issue.

NOTICE – FIRST WARNING A remote user has initiated a suspicious transfer of the following illegal content onto this device: Pornographic Images Depicting Minors

This computer has been logged. Do not attempt to close this message until the files are removed by Microsoft.

Call Microsoft Support immediately at the number below to be guided through the removal process. Your IP address has been logged by Microsoft. IGNORE THIS MESSAGE AT YOUR OWN LEGAL RISK

(Critical) Internet Security Damaged

A suspicious connection was trying to access your logins, banking information credential sand tracking your internet activity. Your PC may have a very serious trojan virus. Do NOT turn off your computer or try and fix this manually; or else ALL of your PC data may be lost permanently. Please visit your nearest Windows Service Center or call our 24-7 Help Desk within the next two minutes to fix the issue.

ERROR CODE: 0x8024402C14C

Warning: Hyper-V Manager !!!

An error occured while attempting to change the state of virtual machine savtsfc01. 'savtstfc01 failed to start. Emulated IDE Controller (Instance ID {83F8638B-8DCA-4152-9EDA-2CA8B33039B4}); Failed to power on with Error 'Genral access denied error'

Your accss has been blocked temporarily to prevent this breach infect other users. Error Code '0X3nb72yz'. The last webpage that you were trying to visit invited Unauthorized IP addresses to get access to your information.

Report this error to a support engineer at a Nearby Microsoft Store.

Your device has been locked!

The last webpage that you visited or a recent software/hardware change by possible infections might have corrupted windows applications. Your Machine address is at risk of being used by stalkers making frequent connections with your device. Restart or Shutdown may cause hardware failure.

Your TCP Connection Was Blocked by Your Firewall. You Account May be Suspended Until You Take An Action. Your Hard Disk Has Exploit.SWF.bd Virus! Pleae DO Not Try To Fix Manuallya. It May Crash Your Data.